25 grc analyst jobs at 18 companies in Silver Spring, MD

1w
Save
Mark Applied
Hide
GRC Analyst – Rockville, MD
Rockville or Falls Church
OnsiteContract
Creative Information Technology
Creative Information Technology: Provides IT solutions and software for government and healthcare sectors.
1+ YOE1 year information security/IT/GRC experience preferred; bachelor\u0002s degree in related field preferred; experience with ServiceNow and Office 365; knowledge of NIST, risk scoring, HIPAA; certifications earn points.
ServiceNow, Office 365
23h
Save
Mark Applied
Hide
Governance, Risk & Compliance (GRC) Analyst
Bethesda, Maryland, United States
$80k-$100k/yr RemoteFull Time
SkyePoint Decisions
SkyePoint Decisions: Provider of cybersecurity, infrastructure, and IT development services.
5+ YOEBachelor's degree and 5+ years cybersecurity GRC experience supporting Federal programs; knowledge of NIST frameworks, FISMA, risk assessments, audit prep, U.S. citizenship and ability to obtain Public Trust required.
ServiceNow GRC, Archer, eMASS, Xacta
1w
Save
Mark Applied
Hide
Information Security Governance, Risk & Compliance (GRC) Analyst
Rockville, Maryland, United States
OnsiteFull Time
ASSYST
ASSYST: An award-winning IT firm that delivers digital transformation, DevSecOps, cyber security, and AI integration for government agencies.
Experience in information security governance, risk management, or compliance; strong analytical, written and verbal communication, organizational skills; ability to learn new technologies and work independently.
ServiceNow Integrated Risk Management (IRM), Microsoft Office 365
1w
Save
Mark Applied
Hide
Security Governance Risk & Compliance (GRC) Analyst
Washington, District of Columbia, United States
$130k-$170k/yr RemoteFull Time
Virtru
Virtru: Provides data-centric encryption and privacy control software for organizations.
5+ YOE5+ years in information security/GRC or IT audit, deep knowledge of CMMC/NIST/FedRAMP/SOC2/PCI, cloud and GRC tool experience, strong communication and risk assessment skills.
Kubernetes, GCP, AWS, Terraform, GitHub, Okta, Hyperproof, Vanta, Drata, Datadog, Splunk
1mo
Save
Mark Applied
Hide
Enterprise Cybersecurity GRC Governance Analyst
McLean, Virginia, United States
$99k-$225k/yr HybridFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles, experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS), knowledge of NIST frameworks and federal security standards, HS diploma/GED, U.S. citizenship required.
ServiceNow, Archer, Xacta, eMASS, RSA Archer, CSAM, Telos Xacta
1mo
Save
Mark Applied
Hide
Enterprise Cybersecurity GRC Governance Analyst
McLean or United States
$99k-$225k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles; experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS); strong process/change management, policy-to-implementation translation, and knowledge of NIST RMF/FISMA/FedRAMP; U.S. citizenship required.
ServiceNow, Archer, RSA Archer, Xacta, Telos Xacta, eMASS, CSAM, API
1mo
Save
Mark Applied
Hide
Sr. ServiceNow Business Analyst - HRSD
McLean, Virginia, United States
OnsiteFull Time
Guidehouse
Guidehouse: Provides management and technology consulting services to diverse organizations.
5+ YOEAbility to obtain Public Trust; 5+ years as a Business Analyst with 3+ years on ServiceNow; CSA certification; bachelor's degree in CS/IT/Business; strong requirements, SDLC/Agile experience, stakeholder facilitation, solution design, training, and mentoring.
ServiceNow, ITSM, SPM, GRC, App Engine, Scoped Applications, SDLC, Scrum, SAFe
18h
Save
Mark Applied
Hide
Senior Compliance Analyst
Washington, District of Columbia, United States
$146k-$194k/yr OnsiteFull Time
Anduril Industries
Anduril Industries: Defense technology building autonomous military hardware and software.
5+ YOE5+ years cybersecurity GRC experience in enterprise environments; Bachelor\u0002s in CS/IT/Cybersecurity; hands-on CMMC, ISO 27001, NIST 800-53/171, GDPR experience; strong communication; eligible for US Secret Clearance and authorized to work in the US.
Lattice OS
1mo
Save
Mark Applied
Hide
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yr RemoteFull Time
Circle
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
3d
Save
Mark Applied
Hide
Senior Information Security Analyst
Crystal City, Virginia, United States
$187k-$253k/yr OnsiteFull Time
GDIT
GDITNYSE: GD: Delivers IT and mission services to government agencies.
8+ YOETS/SCI+Polygraph required,8+ years experience in information security, DoW 8570 IAT I+, RMF/ATO experience, risk assessments, audits, vulnerability analysis, and GRC tooling experience.
Xacta, IDS
1w
Save
Mark Applied
Hide
Cleared Cyber Analyst
Rome or Chantilly or Charlottesville
$141k-$263k/yr OnsiteFull Time
General Atomics Aeronautical Systems
General Atomics Aeronautical Systems: Designs and manufactures unmanned aircraft and radar systems.
5+ YOEActive Top Secret/SCI clearance, US citizenship, bachelor\u0002s or equivalent, ~5+ years security experience, knowledge of CMMC/DFARS/NIST, RMF/IC directives, security assessments, and strong analytical and communication skills.
SIEM, GRC, vulnerability scanners
1w
Save
Mark Applied
Hide
Senior Information Security Analyst
Crystal City, Virginia, United States
$187k-$253k/yr OnsiteFull Time
General Dynamics Information TechnologyNYSE: GD: Provides mission-critical IT services to government and defense organizations.
8+ YOEActive TS/SCI with polygraph, 8+ years related experience, US citizenship, DoW 8570 IAT I, experience with RMF/ATO activities, security audits, vulnerability assessment, and GRC tooling (Xacta).
Xacta, IDS
1w
Save
Mark Applied
Hide
IT Risk & Compliance Analyst
Washington, District of Columbia, United States
$77k-$95k/yr OnsiteFull Time
NORC at the University of Chicago
NORC at the University of Chicago: Conducts objective social science research and public policy analysis.
2+ YOESupport FedRAMP continuous monitoring, assess security controls, coordinate evidence collection and audits, track remediation; U.S. citizenship required; 2+ years GRC/security experience preferred.
CSAM, ServiceNow GRC, Archer
2w
Save
Mark Applied
Hide
Senior Information Security Analyst
Fairfax, Virginia, United States
$105k-$115k/yr HybridFull Time
Data Systems Analysts
Data Systems Analysts: Provides IT and cybersecurity solutions for government agencies.
8+ YOEBachelor's in IT or related +8 years IA experience (CISSP may substitute 2yrs), 3+ years leadership, Public Trust eligibility, NIST RMF and 800-53 expertise, GRC tool experience, strong analysis and communication skills.
Microsoft Copilot, Telos Xacta, CSAM, RSA Archer, eMASS
1mo
Save
Mark Applied
Hide
Senior Security Analyst, Customer Assurance
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam
$134k-$214k/yr HybridFull Time
Plaid
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
6+ YOE6+ years in security assurance/GRC with ownership of customer-facing security workflows; experience reviewing security contract provisions; familiarity with SOC 2, ISO 27001, NIST frameworks, PCI, GLBA, GDPR/CCPA; program design, metrics ownership, and AI-assisted workflow experience.
SOC 2, ISO 27001, NIST CSF, PCI DSS, GLBA, GDPR, CCPA, NIST 800-53
2w
Save
Mark Applied
Hide
Mid-Level RMF Controls / ConMon Analyst
Washington or Maryland
$75k-$90k/yr RemoteContract
K2United
K2United: Provides cybersecurity advisory and online workforce safety training.
4+ YOE4+ years RMF/continuous monitoring experience, POA&M and control assessment expertise, GRC platform experience, bachelor’s degree or equivalent, ability to meet federal background investigation.
JCAM, CSAM, eMASS, Xacta, Power BI, Splunk
3w
Save
Mark Applied
Hide
Financial Management Sr Analyst
Washington, District of Columbia, United States
$71k-$157k/yr OnsiteFull Time
CGI
CGINYSE: GIB: Provides information technology and business consulting services.
8+ YOE8 years financial management experience, bachelor\u0002s degree or equivalent, knowledge of SABRS/SMARTS and DAI modules, ability to reconcile transactions and resolve interface errors, audit background desired.
Defense Agencies Initiative (DAI), SABRS, SMARTS, Aquire 2 Retire (A2R), Budget to Report (B2R), Procure to Pay (P2P), Order to Cash (O2C), Cost Accounting (CA), Oracle Time and Labor (OTL), Oracle Business Intelligence Enterprise Edition (OBIEE), MCVISTA, GRC
2w
Save
Mark Applied
Hide
Governance, Risk and Compliance Analyst
Reston or Somerville
$80k-$125k/yr HybridFull Time
Babel Street
Babel Street: AI-powered identity intelligence and risk operations software solutions.
3+ YOEBachelor's degree or equivalent, 3+ years GRC/InfoSec experience, knowledge of NIST CSF, CMMC, Cyber Essentials Plus, SOC 2, ISO/IEC 27001, audit support and risk assessment skills.
NIST Cybersecurity Framework (NIST CSF), CMMC, Cyber Essentials Plus, ISO/IEC 27001, SOC 2
2mo
Save
Mark Applied
Hide
NERC Operations Sr Analyst, Central
Indianapolis or Dayton or Arlington or Salt Lake City or Louisville
$83k-$99k/yr OnsiteFull Time
AES
AESNYSE: AES: Provides global power generation and sustainable energy solutions.
3+ YOEBachelor’s in engineering or related field; 3–7+ years in inverter-based resources; NERC standards knowledge; analytical and organizational skills; strong communication and cross-functional collaboration; preferred certifications.
SCADA, OATI, SAP, GADS, OATI Portal, NERC Compliance tools, GRC tools
2mo
Save
Mark Applied
Hide
NERC Operations Sr Analyst, East
Indianapolis or Dayton or Arlington or Salt Lake City or Louisville
$83k-$99k/yr OnsiteFull Time
AES
AESNYSE: AES: Provides electricity and renewable energy solutions globally.
3+ YOEBachelor’s degree in engineering; 3–7+ years in inverter-based resources or renewable energy; NERC compliance experience; strong analytical, communication, and cross-functional skills.
SCADA, OATI, SAP, MS Office, GRC